CVE-2013-7064

Cross-site scripting XSS vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values...

Cross site scripting

Cross-site scripting XSS vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values...

CVE-2013-7064

CVE-2013-7064 describes a Cross-Site Scripting (XSS) vulnerability in the Drupal contributed module EU Cookie Compliance 7.x-1.x (prior to 7.x-1.12). The issue allows remote authenticated administrators (with the Administer EU Cookie Compliance popup permission) to inject arbitrary web script or ...

CVE-2013-7064

Cross-site scripting XSS vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HTML via unspecified configuration values...

European Commission Urges U.S to Reform Surveillance Methods

The European Commission is urging the United States government to make some changes to the way it handles surveillance to help restore the trust in the relationship between the EU and the U.S. The commission is asking for the U.S. to promote privacy rights internationally, adopt the EU’s data...

SA-CONTRIB-2013-094 - EU Cookie Compliance - Cross Site Scripting (XSS)

This module enables you to display notifications so that visitors can give their consent to setting cookies by your website. The module doesn't sufficiently fiter and validate configuration values entered by administrators. This vulnerability is mitigated by the fact that an attacker must have a...

EU Petition Seeks to Restrict Export of 'Digital Arms'

A Dutch member of the European parliament is supporting a grass-roots effort to restrict the export of surveillance software such as FinFisher and others, which are used by some governments and law-enforcement agencies to monitor their citizens’ activities. The effort, dubbed Stop Digital Arms, i...

EU: Harsher Penalties for Convicted Hackers in Europe

Legislation filed late last week in the European Parliament that could broadly reform how convicted cybercriminals are prosecuted, fails to adequately differentiate good hackers from bad hackers, a political group argued today. Jan Philipp Albrech, a spokesman for the Greens/European Free Allianc...

Flaw Leaves EA Origin Platform Users Open to Attack

Five years ago, a pair of security researchers write a book called Exploiting Online Games in which they described a number of ways in which attackers could take advantage of weaknesses in the protection systems for various gaming platforms. Now, with online gaming having emerged as a massive...

EU Proposes New Data Breach Notification Law, CERTs

Under an EU law proposed yesterday, a collection of firms across Europe would have to alert regulators when they’ve been hacked, suffered a data breach or been attacked online. The law would also appoint a computer emergency response team CERT to all 27 EU members that would be responsible for...

ENISA Outlines Security Regulations for EU Smart Grid Expansion

The European Union has set a series of ambitious goals for itself: by 2020, the 27 member states expect to collectively use 20 percent renewable energy, reduce CO2 emissions by 20 percent, and increase energy efficiency by 20 percent. In order to accomplish these goals, Europe will need to perfor...

Microsoft Agrees to Modify Windows 8 Following EU Complaint

Microsoft announced Wednesday it will tweak the release of its forthcoming Windows 8 operating system to comply with the European Commission, which argues that in its current state, the software fails to offer customers a browser choice screen to let them “easily choose their preferred web...

EU Plan to Standardize Punishments Also Could Impact Security Research

While much has been made of recent efforts to provide parity in prosecutions and punishments for cybercrimes across the 27-nation European Union, less has been said about how it may impact security researchers who use the same hacker tools to perform their work. Under a proposal approved recently...

EU Gets Tough: Gives Google Two Weeks To Explain Data Practices

A French data privacy watchdog is raising alarms about Google’s data collection practices and has given the Internet search giant a little over two weeks to explain the way it handles the information of its users. The Commission Nationale de l’Informatique CNIL sent a letter .PDF late last week t...

EU Asks Google to Delay Privacy Policy Changes

European officials want Google to slow its plans to introduce a new privacy policy so that they can investigate whether or not it is strong enough to protect user data. The Article 29 Working Party, which is comprised of European data protection officials as well as a representative from the...

EU Audit Forces Changes To Facebook Privacy Policies

An audit of Facebook’s operations by the Office of the Data Protection Commissioner in Ireland will result in major changes to the way the social networking giant manages user data. The 143 page report, issued on Wednesday, calls on Facebook to give users more control over how their personal...

Twenty Something Asks Facebook For His File And Gets It – All 1,200 Pages

Be careful of what you ask for. That’s a lesson that Max Schrems of Vienna, Austria, learned the hard way when he sent a formal request to Facebook citing European law and asking for a copy of every piece of personal information that the world’s largest social network had collected on him. After ...

First Ever Joint EU-US Cyber War Game Starts

Despite extreme upheaval and rampant infighting caused by the European debt crisis, the EU and U.S. are banding together today in Brussels and shifting its focus toward cyber security. The European Network and Information Security Agency ENISA and the U.S. Department of Homeland Security will be...

Hackers Steal 2 Million Tonnes Of Carbon Credits In The EU !

Hackers have stolen two million tons of pollution rights in a raid five days this week in the carbon system of the EU, an EU source said Thursday. The amount of the stolen carbon credits in the online action, as a spokesman for the European Commission said was "maybe unified" represent only a...

Unfixed XSS vulnerability at athinai.adagio4.eu

Security researcher Busi, has submitted on 26/10/2010 a cross-site-scripting XSS vulnerability affecting athinai.adagio4.eu, which at the time of submission ranked 5058573 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...